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CLAIMS 

1 . In a digital scanner, a method for secure document 
transmission, the method comprising: 

selecting a profile having an encryption field; 
5 scanning a document; and, 

encrypting the document in response to the encryption 
field of the selected profile. 

2. The method of claim 1 wherein selecting a profile 
10 includes selecting a profile having an address field; and, 

the method further comprising: 
sending the encrypted document in response to the 
address field of the selected profile. 



15 3. The method of claim 2 further comprising: 

creating profiles having an address field and an 
encryption field; 

storing the profiles in a directory; and, 

wherein selecting a profile includes selecting a profile 

20 from the directory. 

4. The method of claim 3 further comprising: 
assigning each profile to a corresponding destination; 

and, 

25 i!;:_i...:j>. therein selecting a profile includes: j 

l 

selecting a destination; and, j 
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using the profile assigned to the selected destination. 

5. The method of claim 3 wherein selecting a profile 
includes selecting a profile having an address selected from the group 

5 including email addresses and file transfer protocol (FTP) addresses. 

6. The method of claim 3 wherein selecting a profile 
includes selecting a profile having an encryption field selected from 
the group including symmetric and asymmetric (public) keys. 

10 

7. The method of claim 6 wherein selecting a profile 
includes selecting a profile having an asymmetric key; and, 

wherein creating profiles includes storing public keys in 
the created profiles. 

15 

8. The method of claim 6 wherein selecting a profile 
includes selecting a profile having a symmetric key; and, 

wherein creating profiles includes storing symmetric keys 
in the created profiles. 

20 

9. The method of claim 3 wherein creating profiles 
includes creating profiles for a plurality of user groups; 

the method further comprising: 

generating a plurality of passwords for the corresponding 

25 - plurality of user-groups;^:and,^ mi j • ■.•>■'. ^ , I 

i 

i 

. i 
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wherein storing the profiles in a directory includes storing 
profiles in a profile directory, in response to the generated password. 

10. The method of claim 3 wherein selecting a profile 
includes selecting a profile having a link to a certification authority 
storing a public key; and, 

wherein encrypting the document using the encryption 
field from the selected profile includes using the public key signed by 
the certification authority to encrypt the document. 



1 1 . The method of claim 7 wherein encrypting the 
document using the encryption field from the selected profile includes: 

generating a random session key; 

encrypting the document with the session key using a 
15 symmetric algorithm; 

encrypting the session key with an asymmetric algorithm 
using the selected profile public key; and, 

wherein sending the encrypted document to the address 
from the selected profile includes sending the encrypted session key. 

20 

12. The method of claim 6 wherein creating profiles 
includes creating a profile with a plurality of addresses and a 
corresponding plurality of public keys; 

wherein encrypting the document includes generating a 
25 single, encrypted document:using, an asymmetric algorithm!; and, 
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wherein sending the encrypted document includes 
sending the single encrypted document to each of the plurality of 
addresses in the profile. 

5 13. In a digital scanner, a method for secure document 

transmission, the method comprising: 
generating a password; 

creating profiles having an address field and an 
encryption field; 

10 storing the profiles in a directory in response to the 

generated password; 

selecting a profile from the directory; 
scanning a document; 

encrypting the document in response to the encryption 
15 field of the selected profile; and, 

sending the encrypted document in response to the 
address field of the selected profile. 



14. A digital scanner secure document transmission 
20 system, the system comprising: 

a profile directory having an interface for selecting profiles 
with an encryption field; 

a document scanner for encrypting documents in 
response to selected profile encryption field; and, 
25 a network interface for transmitting the encrypted 

documents. j 

i 
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15. The system of claim 14 wherein the profile directory 
supplies selected profiles with an address field; and, 

wherein the network interface transmits the encrypted 
5 documents in response to the address field of the selected profile. 

16. The system of claim 15 further comprising: 
a memory for storing the profiles; and, 

wherein the profile directory has an interface for creating 
10 profiles having an address field and an encryption field; 

17. The system of claim 16 wherein the profile directory 
has an interface for accepting destinations and assigning each profile 
to a corresponding destination; and, 

15 wherein profiles are selected from the profile directory in 

response to entering the destination. 

18. The system of claim 16 wherein the profile directory 
supplies selected profiles having an address selected from the group 

20 including email addresses and file transfer protocol (FTP) addresses. 

19. The system of claim 16 wherein the profile directory 
supplies selected profiles having an encryption field selected from the 
group including symmetric and asymmetric (public) keys. 

25 ! 
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20. The system of claim 19 wherein the profile directory 
supplies selected profiles having an asymmetric key; and, 

wherein the memory stores the public keys corresponding 
to each profile. 

21. The system of claim 19 wherein the profile directory 
supplies selected profiles having a symmetric key; and, 

wherein the memory stores the symmetric keys 
corresponding to each profile. 

22. The system of claim 16 wherein the profile directory 
has an interface for generating passwords, the profile directory 
creating profiles for a plurality of user groups in response to the 
generated passwords. 



23. The system of claim 16 further comprising: 

a certification authority storing public keys; 

wherein the profile directory supplies a selected profile 

having a link to the certification authority; 
20 wherein the network interface negotiates with the 

certification authority for a public key corresponding to the selected 

profile; and, 

wherein the document scanner uses the public key signed 
by the certification authority to encrypt the document. 

25 i 
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24. The system of claim 20 wherein the document 
scanner generates a random session key and encrypts the document 
with the session key using a symmetric algorithm; 

wherein the document scanner encrypts the session key 
with an asymmetric algorithm using the selected profile public key; 
and, 

wherein the network interface transmits the encrypted 
session key with the encrypted document. 

25. The system of claim 19 wherein the profile directory 
supplies a selected profile with a plurality of addresses and a 
corresponding plurality of public keys; 

wherein the document scanner encrypts the document 
into a single encrypted document using an asymmetric algorithm; 
and, 

wherein the network interface sends the single encrypted 
document to each of the plurality of addresses in the selected profile. 



